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IN THE CLAIMS 

Please amend the claims as follows. This listing of the claims will replace all prior versions, and 
listings, of the claims in the Application. 

1 . (currently amended) A method of mirroring ap n e or mo r e traffic flowf fsll from a source 
network device to a target network devic e for allowing analysis of the traffic flow using 
the target network device, the method comprising the steps of: 

receiving one or more ingress frames of the traffic flow at the source network 
device; 

generating at least one duplicate frame for each of the one or more ingress frames 
at the source network devic e in response to determining that the one or more 
ingress frames satisfy prescribed mirror classification criteria corresponding to 
information intended to influence said analysis of the traffic flow, wherein 
each of the one or more ingress frames at least comprises an associated 
address corresponding to an original designation network device : 

appending a virtual local area network (VLAN) tag to the at least one duplicate 
fram e, wherein the VLAN designated the target network device which is 
different than the original designation network device ; 

transmitting the one or more ingress frames from the source network device based 
on the associated address; 

transmitting the at least one duplicate frame with the VLAN tag from the source 
network device towards the target network device based on the VLAN tag; 

receiving the at least one duplicate frame with the VLAN tag at the target network 
device; [[ and]] 

removing the VLAN tag from the at least one duplicate fram e at the target 
network device after receiving the at least one duplicate frame at the target 

network devic e : whoroin such that the target network device generates a 
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substantially identical copy of at least one of the one or more ingress frames 

of the traffic flow r eceived at the source network device ; and 

performing analysis of the at least one duplicate frame received at the target 

network device using the target network device for accessing the at least one 

duplicate frame . 

2. (currently amended) The method of claim [[2]]i, wherein the one or more ingress frames 
comprise one or more data link layer frames. 

3. (original) The method of claim 3, wherein the one or more data link layer frames 
comprise one or more Ethernet frames. 

4. (original) The method of claim 1, wherein the VLAN tag is an 802.1Q tag. 

5. (original) The method of claim 1, wherein trie VLAN tag comprises a network 
monitoring VLAN reserved for transmitting at least one mirrored flow and wherein 

6. (original) The method of claim 1 , wherein the source network device is one of a first set 
of source network devices adapted to concurrently generate a plurality of duplicate 
frames and append said VLAN tag to said plurality of frames. 

7. (original) The method of claim 1 , wherein the target network device is one of a second 
set comprising a plurality of network devices, wherein the method further comprises the 
steps of: transmitting the at least one duplicate frame with the VLAN tag from the source 
network device to each of the plurality of network devices based on the VLAN tag; 

. receiving the at least one duplicate frame with the VLAN tag at each of the plurality of 

network devices; and removing the VLAN tag from the at least one duplicate frame at 

each of the plurality of network devices. 
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8. (original) The method of claim 1, wherein the method further comprises the step of 

transmitting said generated copy of one or more ingress frames from the target network 

device to one or more host devices operatively coupled to the target network device. 



9, (currently amended) A system adapted to mirror one or more flows between remote 
network nodes, the system comprising: 
a source network device adapted to: 

receive one or more ingress frames of the traffic flow at the source network 
device; 

generate at least one duplicate frame for each of the one or more ingress frames at 
the source network device in response to determining that the one or more 
ingress frames satisfy prescribed mirror classification criteria corresponding to 
information intended to influence said analysis of the traffic flow , wherein 
each of the one or more ingress frames at least comprises an address 
corresponding to an original designation network device ; 
' append a virtual local area network (VLAN) tag to the at least one duplicate 
fram e, wherein the VLAN designated the target network device which is 
different than the original designation network device : 
transmit the one or more ingress frames from the source network device based on 
the address; 

transmit the at least one duplicate frame with the VLAN tag from the source 
network device towards the target network device based on the VLAN tag; 
and 

a source network device adapted to: 

receive the at least one duplicate frame with the VLAN tag at the target network 
device; and 

. remove the VLAN tag from the at least one duplicate fram e at the target network 
device after receiving the at least one duplicate frame at the target network 
device such that the target network device generates a substantially identical 
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copy of at least one of the one or more ingress frames of the traffic flow 

received at the source network device thereby allowing analysis of at least a 

portion of the traffic flow to be performed using the target network device. 



10. (original) The system of claim 9, wherein the one or more ingress frames comprise one or 
more data link layer frames. 

1 1 . (original) The system of claim 1 0, wherein the one or more data link layer frames 
comprise one or more Ethernet frames. 

1 2. (original) The system of claim 9, wherein the VLAN tag is an 802. 1 Q tag. 

13. .(original) The system of claim 9, wherein the VLAN tag comprises a network monitoring . 
VLAN reserved for transmitting at least one mirrored flow. 

14. (original) The system of claim 9, wherein the source network device is one of a first set 
of source network devices adapted to concurrently generate a plurality of duplicate 
frames and append said VLAN tag to said plurality of frames. 

15. (original) The system of claim 9, wherein the target network device is one of a second set 
comprising a plurality of network devices, and wherein the source network device is 
further adapted to transmit the at least one duplicate frame with the VLAN tag to each of 
the plurality of network devices based on the VLAN tag; and wherein the plurality of 
network devices are adapted to: receive the at least one duplicate frame with the VLAN 
tag, and remove the VLAN tag from the at least one duplicate frame. 
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16. (original) The system of claim 9, wherein the target network device adapted to transmit 

said generated copy of one or more ingress frames to one or more host devices 

operatively coupled to the target network device. 
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